Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PWvkTqwuvg5f0ha4qIIKjGsfJo.roa
File: 1PWvkTqwuvg5f0ha4qIIKjGsfJo.roa (raw, json)
Hash identifier: RdIuEymaFa2J/+7UePxrVy+L9Q4uEi1ciyrId1nC8wI=
Subject key identifier: D4:F5:AF:91:3A:B0:BA:F8:39:7F:48:5A:E2:A2:08:2A:31:AC:7C:9A
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 1B7D
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PWvkTqwuvg5f0ha4qIIKjGsfJo.roa
Signing time: Wed 29 Sep 2021 02:46:39 +0000
ROA not before: Wed 29 Sep 2021 02:46:39 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 38841
IP address blocks: 118.233.120.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7037 (0x1b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 29 02:46:39 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=D4F5AF913AB0BAF8397F485AE2A2082A31AC7C9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:9a:c8:2a:6b:46:07:69:33:36:01:20:ce:
1a:03:69:97:bc:af:d7:90:06:e5:64:72:5b:9b:10:
43:26:81:5f:b4:f5:d5:9c:65:6e:1d:d9:23:12:78:
bf:c4:3b:51:4b:f1:d1:e7:53:76:f6:21:31:e8:8d:
2a:45:c7:8e:49:0a:70:b8:0b:23:4e:28:b6:b3:e7:
fd:e1:dc:2f:ca:17:86:b9:0c:0d:0a:f7:fd:f6:c5:
8b:e5:9b:10:86:e5:4a:62:1d:a5:60:90:b8:5a:fb:
a2:44:5c:a3:b2:5e:20:b3:52:b5:96:8f:09:c5:1a:
5e:4d:95:05:ab:0c:2d:62:9b:2b:fc:02:c3:07:6b:
0e:4b:7a:bd:73:03:bd:70:d9:4d:c5:43:8a:01:b2:
a7:80:40:16:4b:7f:77:f2:d1:d2:2f:88:3b:ac:93:
dc:68:98:6e:3c:26:a1:1d:83:2b:03:66:d2:0b:18:
2e:77:7e:5f:85:b3:15:77:20:d0:81:71:64:aa:6b:
32:e2:e4:67:65:b8:1c:86:4e:47:f5:bb:48:57:68:
05:b4:75:52:34:75:8f:49:da:fe:2d:ec:64:3f:6c:
ad:7a:7b:81:e0:c8:47:a5:72:9e:fd:86:ab:70:1a:
6c:02:57:ef:32:b8:ea:39:b2:64:3d:61:d3:dd:a7:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F5:AF:91:3A:B0:BA:F8:39:7F:48:5A:E2:A2:08:2A:31:AC:7C:9A
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/1PWvkTqwuvg5f0ha4qIIKjGsfJo.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
118.233.120.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:c0:e3:ea:0b:4f:13:af:87:a9:63:bb:c5:3c:75:39:4a:72:
5e:25:69:32:d8:74:49:8a:b9:71:d5:b9:47:9f:37:81:ee:f0:
44:36:40:65:29:22:1e:98:72:1d:af:66:8c:4b:f7:21:94:ee:
b5:ff:95:b9:4c:07:63:42:c8:e7:d2:e9:ef:29:f1:b0:63:75:
42:cc:ba:92:c5:66:cf:af:75:7e:5f:93:46:b8:0c:f4:6f:de:
79:b3:02:3b:0e:32:90:4e:86:2e:c0:8c:14:03:42:88:78:6c:
15:0d:66:9f:a4:17:5e:10:cc:03:c5:e1:46:de:5d:55:74:02:
3b:af:4d:48:ef:64:16:96:f5:ba:c6:59:58:fa:84:86:8f:e1:
52:b6:a7:2d:16:97:14:f2:23:63:b1:fb:73:ca:71:9c:32:b5:
98:fb:da:ac:c3:6a:de:b3:3e:ce:c7:92:ca:80:a9:a8:c7:c8:
5c:71:80:41:fd:91:9d:9c:51:66:c1:02:d7:d6:c0:c9:17:38:
4b:d3:96:53:86:b8:d5:45:4e:cc:8c:c2:a4:7f:5b:52:10:76:
ef:f2:b7:5c:84:54:ad:37:aa:3d:85:c6:7e:71:b1:16:4a:9d:
47:b4:0e:7f:90:ea:06:b0:33:7e:2a:15:c8:52:56:2a:59:28:
03:1c:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:46 2024 by rpki-client on console-fra.rpki-client.org